WGU C845 - Information Systems Security
(SSCP) OA EXAM STUDY GUIDE 2026/2027 COMPLETE
QUESTIONS WITH VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS
<NEWEST VERSION>
1. AAA, Triple A - ANSWER ✔ Referred to as the AAA of access control:
authentication, authorization, and accounting
2. algorithm - ANSWER ✔ A mathematical function cryptographic algorithm
that encrypts or decrypts text
3. authentication - ANSWER ✔ Method used to verify the identity claim of a
user
4. authorization - ANSWER ✔ The act of defining the network resources,
applications, and data that may be accessed by a user
5. availability - ANSWER ✔ One of the central principles of the AIC triad. A
core goal of a security professional is to ensure that data and hardware are
available when the user requires them
6. confidentiality - ANSWER ✔ One of the central principles of the AIC triad;
represents a core goal of the security professional to ensure, possibly
through encryption, that sensitive information is protected from exposure
,7. due care - ANSWER ✔ The taking of actions that a reasonable and prudent
person would take in a given situation
8. due diligence - ANSWER ✔ Refers to taking actions that prevent harm to
persons or their property
9. identification - ANSWER ✔ A unique designation assigned to a member of
a group. A claim presented when desiring access
10.integrity - ANSWER ✔ One of the central principles of the AIC triad;
represents a core goal of a security professional, to ensure that no changes
have occurred to data or a system, thus ensuring the data's integrity
11.CSMA - ANSWER ✔ Carrier sense multiple access. Carrier sense means
that a device can listen to all communications when connected to the
network wire. Multiple access means that any member of the network can
communicate at any time.
12.CSMA/CA - ANSWER ✔ Carrier sense multiple access with collision
avoidance. With collision avoidance the node wishing to transmit broadcasts
a jamming tone announcing that it will be transmitting. This prevents other
nodes from transmitting at the same time.
13.CSMA/CD - ANSWER ✔ Carrier sense multiple access with collision
detection. A media control method that features transmission collision
detection when two nodes transmit at exactly the same time. In the event of a
communication collision, both nodes set an arbitrary timer, and the first
timer to expire transmits first.
,14.data disclosure - ANSWER ✔ A breach or release of data due to an attack in
which sensitive data is disclosed to the public.
15.demilitarized zone - ANSWER ✔ A subnetwork created between two
firewalls exposed to an untrusted network. Applications that may be
accessed by the public are placed on hardened servers within the
demilitarized zone.
16.What can be best defined as the examination of threat sources against system
vulnerabilities to determine the threats for a particular system in a particular
operational environment?
A. Risk management
B. Risk analysis
C. Threat analysis
D. Due diligence - ANSWER ✔ C
17.The first step in the implementation of the contingency plan is to perform:
A. A firmware backup
B. A data backup
C. An operating systems software backup
D. An application software backup - ANSWER ✔ B
18.The MOST common threat that impacts a business's ability to function
normally is:
A. Power Outage
B. Water Damage
C. Severe Weather
, D. Labor Strike - ANSWER ✔ A
19.Failure of a contingency plan is usually:
A. A technical failure.
B. A management failure.
C. Because of a lack of awareness.
D. Because of a lack of training. - ANSWER ✔ B
20.Within the legal domain what rule is concerned with the legality of how the
evidence was gathered ?
A. Exclusionary rule
B. Best evidence rule
C. Hearsay rule
D. Investigation rule - ANSWER ✔ A
21.Computer-generated evidence is considered:
A. Best evidence
B. Second hand evidence
C. Demonstrative evidence
D. Direct evidence - ANSWER ✔ B
22.Which of the following would be MOST important to guarantee that the
computer evidence will be admissible in court?
A. It must prove a fact that is immaterial to the case.
B. Its reliability must be proven.
(SSCP) OA EXAM STUDY GUIDE 2026/2027 COMPLETE
QUESTIONS WITH VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS
<NEWEST VERSION>
1. AAA, Triple A - ANSWER ✔ Referred to as the AAA of access control:
authentication, authorization, and accounting
2. algorithm - ANSWER ✔ A mathematical function cryptographic algorithm
that encrypts or decrypts text
3. authentication - ANSWER ✔ Method used to verify the identity claim of a
user
4. authorization - ANSWER ✔ The act of defining the network resources,
applications, and data that may be accessed by a user
5. availability - ANSWER ✔ One of the central principles of the AIC triad. A
core goal of a security professional is to ensure that data and hardware are
available when the user requires them
6. confidentiality - ANSWER ✔ One of the central principles of the AIC triad;
represents a core goal of the security professional to ensure, possibly
through encryption, that sensitive information is protected from exposure
,7. due care - ANSWER ✔ The taking of actions that a reasonable and prudent
person would take in a given situation
8. due diligence - ANSWER ✔ Refers to taking actions that prevent harm to
persons or their property
9. identification - ANSWER ✔ A unique designation assigned to a member of
a group. A claim presented when desiring access
10.integrity - ANSWER ✔ One of the central principles of the AIC triad;
represents a core goal of a security professional, to ensure that no changes
have occurred to data or a system, thus ensuring the data's integrity
11.CSMA - ANSWER ✔ Carrier sense multiple access. Carrier sense means
that a device can listen to all communications when connected to the
network wire. Multiple access means that any member of the network can
communicate at any time.
12.CSMA/CA - ANSWER ✔ Carrier sense multiple access with collision
avoidance. With collision avoidance the node wishing to transmit broadcasts
a jamming tone announcing that it will be transmitting. This prevents other
nodes from transmitting at the same time.
13.CSMA/CD - ANSWER ✔ Carrier sense multiple access with collision
detection. A media control method that features transmission collision
detection when two nodes transmit at exactly the same time. In the event of a
communication collision, both nodes set an arbitrary timer, and the first
timer to expire transmits first.
,14.data disclosure - ANSWER ✔ A breach or release of data due to an attack in
which sensitive data is disclosed to the public.
15.demilitarized zone - ANSWER ✔ A subnetwork created between two
firewalls exposed to an untrusted network. Applications that may be
accessed by the public are placed on hardened servers within the
demilitarized zone.
16.What can be best defined as the examination of threat sources against system
vulnerabilities to determine the threats for a particular system in a particular
operational environment?
A. Risk management
B. Risk analysis
C. Threat analysis
D. Due diligence - ANSWER ✔ C
17.The first step in the implementation of the contingency plan is to perform:
A. A firmware backup
B. A data backup
C. An operating systems software backup
D. An application software backup - ANSWER ✔ B
18.The MOST common threat that impacts a business's ability to function
normally is:
A. Power Outage
B. Water Damage
C. Severe Weather
, D. Labor Strike - ANSWER ✔ A
19.Failure of a contingency plan is usually:
A. A technical failure.
B. A management failure.
C. Because of a lack of awareness.
D. Because of a lack of training. - ANSWER ✔ B
20.Within the legal domain what rule is concerned with the legality of how the
evidence was gathered ?
A. Exclusionary rule
B. Best evidence rule
C. Hearsay rule
D. Investigation rule - ANSWER ✔ A
21.Computer-generated evidence is considered:
A. Best evidence
B. Second hand evidence
C. Demonstrative evidence
D. Direct evidence - ANSWER ✔ B
22.Which of the following would be MOST important to guarantee that the
computer evidence will be admissible in court?
A. It must prove a fact that is immaterial to the case.
B. Its reliability must be proven.
